CVE-2025-25056

CVE-2025-25056 describes a Cross-site request forgery in Inaba Denki Sangyo Wi-Fi AP UNIT AC-WPS-11ac series. The vulnerability allows an authenticated user to perform unintended operations when visiting a malicious page while logged in. The JVN entry aggregates multiple CVEs for this product fam...

CVE-2025-25053

CVE-2025-25053 describes an OS command injection in the WEB UI (settings page) of Inaba Denki Sangyo Wi‑Fi AP UNIT AC-WPS-11ac series. A remote attacker who can log in may execute arbitrary OS commands due to this input handling flaw. Affected are pre‑patch firmware versions; vendor‑provided fixe...

CVE-2025-25053

OS command injection vulnerability in the WEB UI the setting page exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, an arbitrary OS command may be executed by a remote attacker who can log in to the product...

CVE-2025-25053

OS command injection vulnerability in the WEB UI the setting page exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, an arbitrary OS command may be executed by a remote attacker who can log in to the product...

CVE-2025-23407

Incorrect privilege assignment vulnerability in the WEB UI the setting page exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a remote attacker who can log in to the product may alter the settings without appropriate privileges...

CVE-2025-23407

CVE-2025-23407 describes an incorrect privilege assignment in the WEB UI (settings page) affecting the Inaba Denki Sangyo Wi‑Fi AP UNIT AC‑WPS‑11ac series. A remote attacker who can log in to the product could alter settings without proper privileges. The CVE is rated CVSS v3.1 base score 4.3 (Me...

CVE-2025-23407

Incorrect privilege assignment vulnerability in the WEB UI the setting page exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a remote attacker who can log in to the product may alter the settings without appropriate privileges...

CVE-2025-3442

This vulnerability exists in TP-Link Tapo H200 V1 IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the...

CVE-2025-3442 Information Disclosure Vulnerability in TP-Link Tapo IoT Smart Hub

This vulnerability exists in TP-Link Tapo H200 V1 IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the...

CVE-2025-3442 Information Disclosure Vulnerability in TP-Link Tapo IoT Smart Hub

This vulnerability exists in TP-Link Tapo H200 V1 IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the...

CVE-2025-3442

The CVE-2025-3442 case concerns TP-Link Tapo H200 V1 IoT Smart Hub. Affected component: device firmware storing Wi‑Fi credentials in plaintext. Root cause: credentials are stored unencrypted within the firmware binary, enabling disclosure if the firmware is extracted. Impact: attacker with physic...

PT-2025-15681 · Unknown · Ac-Wps-11Ac Series

Name of the Vulnerable Software and Affected Versions: Wi-Fi AP UNIT 'AC-WPS-11ac series' affected versions not specified Description: A cleartext transmission of sensitive information issue exists, which may allow a remote unauthenticated attacker to eavesdrop on the communication and obtain...

Inaba Denki Sangyo Wi-Fi AP UNIT 操作系统命令注入漏洞

The Inaba Denki Sangyo Wi-Fi AP UNIT is a Wi-Fi AP unit from Inaba Denki Sangyo, a Japanese company. An operating system command injection vulnerability exists in Inaba Denki Sangyo Wi-Fi AP UNIT v2.0.03P and prior versions, which stems from a service-specific operating system command injection...

PT-2025-15680 · Unknown · Ac-Wps-11Ac Series

Name of the Vulnerable Software and Affected Versions: Wi-Fi AP UNIT 'AC-WPS-11ac series' affected versions not specified Description: The issue is related to improper restriction of rendered UI layers or frames. If a user views and clicks on content on a malicious page while logged in, unintende...

PT-2025-15675 · Tp Link · Tp-Link Tapo C200

Name of the Vulnerable Software and Affected Versions: TP-Link Tapo H200 V1 IoT Smart Hub version V1 Description: The issue arises from the storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and...

PT-2025-15684 · Unknown · Ac-Wps-11Ac Series

Name of the Vulnerable Software and Affected Versions: Wi-Fi AP UNIT 'AC-WPS-11ac series' affected versions not specified Description: A missing authentication for critical function vulnerability exists, allowing a remote unauthenticated attacker to obtain the product configuration information,...

Inaba Denki Sangyo Wi-Fi AP UNIT 安全漏洞

The Inaba Denki Sangyo Wi-Fi AP UNIT is a Wi-Fi AP unit from Inaba Denki Sangyo, a Japanese company. A security vulnerability exists in Inaba Denki Sangyo Wi-Fi AP UNIT v2.0.03P and earlier versions, which originates from the transmission of sensitive information in clear text and could lead to a...

Inaba Denki Sangyo Wi-Fi AP UNIT 访问控制错误漏洞

The Inaba Denki Sangyo Wi-Fi AP UNIT is a Wi-Fi AP unit from Inaba Denki Sangyo, a Japanese company. The Inaba Denki Sangyo Wi-Fi AP UNIT suffers from an access control error vulnerability that stems from a lack of authentication for critical functions, which could allow a remote attacker to obta...

TP-LINK Tapo H200 安全漏洞

TP-LINK Tapo H200 is a smart hub from China P&L TP-LINK. A security vulnerability exists in TP-Link Tapo H200 version V1, which stems from Wi-Fi credentials being stored in clear text, which could lead to credential disclosure...

PT-2025-15682 · Unknown · Ac-Wps-11Ac Series

Name of the Vulnerable Software and Affected Versions: Wi-Fi AP UNIT 'AC-WPS-11ac series' affected versions not specified Description: A critical issue exists in the Wi-Fi AP UNIT 'AC-WPS-11ac series' due to an OS command injection vulnerability in a specific service. This vulnerability allows a...